CVE-2021-47070

MEDIUM

Linux Kernel 4.20-5.12.7 - Use-After-Free in uio_hv_generic Error Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix another memory leak in error handling paths Memory allocated by 'vmbus_alloc_ring()' at the beginning of the probe function is never freed in the error handling path. Add the missing 'vmbus_free_ring()' call. Note that it is already freed in the .remove function.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/261bbd90cc53d2835343f056770156cf1e82cf03

Mailing List

https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

Patch

https://git.kernel.org/stable/c/5f59240cf25b2f7a0fdffc2701482a70310fec07

Patch

https://git.kernel.org/stable/c/0b0226be3a52dadd965644bc52a807961c2c26df

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 13.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (10)

Linux/Linux < 4.20

Linux/Linux 4.20

Linux/Linux 5.10.241 - 5.10.*

Linux/Linux 5.12.7 - 5.12.*

Linux/Linux 5.13

Linux/Linux cdfa835c6e5e87d145f9f632b58843de97509f2b - 0b0226be3a52dadd965644bc52a807961c2c26df

Linux/Linux cdfa835c6e5e87d145f9f632b58843de97509f2b - 261bbd90cc53d2835343f056770156cf1e82cf03

Linux/Linux cdfa835c6e5e87d145f9f632b58843de97509f2b - 5f59240cf25b2f7a0fdffc2701482a70310fec07

linux/linux_kernel 5.13 rc1 (2 CPE variants)

linux/linux_kernel 4.20 - 5.12.7

Published Mar 01, 2024

Tracked Since Feb 18, 2026